CVE-2026-57417: WordPress Cart Lift plugin <= 3.1.57 - Cross Site Scripting (XSS) vulnerability
Published Jul 13, 2026
·Updated
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme Cart Lift cart-lift allows Stored XSS.This issue affects Cart Lift: from n/a through <= 3.1.57.
Affected Software
1 affected component
Rextheme Cart Lift<=3.1.57
Event History
Jul 13, 2026
CVE Published
via MITRE·08:41 AM
Data Sourced
via MITRE·08:41 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-57417?
CVE-2026-57417 has a severity rating of high, specifically a score of 7.1.
2
How do I fix CVE-2026-57417?
To fix CVE-2026-57417, update the Rextheme Cart Lift plugin to version 3.1.58 or later.
3
What type of vulnerability is associated with CVE-2026-57417?
CVE-2026-57417 is a Cross Site Scripting (XSS) vulnerability.
4
What impact does CVE-2026-57417 have on my website?
CVE-2026-57417 allows for stored XSS attacks, which can compromise the integrity of your website and user data.
5
What versions of the Rextheme Cart Lift plugin are affected by CVE-2026-57417?
CVE-2026-57417 affects Rextheme Cart Lift plugin versions from n/a up to and including 3.1.57.